PT-2009-3042 · Max · Max.Blog
CVSS v2.0
6.4
Média
| Vetor | AV:N/AC:L/Au:N/C:N/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Max.Blog version 1.0.6
Description
The issue concerns improper access restriction in the delete.php file, allowing remote attackers to delete arbitrary blog posts by making a direct request.
Recommendations
For Max.Blog version 1.0.6, restrict access to the delete.php file to prevent unauthorized deletion of blog posts. As a temporary workaround, consider disabling the delete functionality until a proper fix is implemented.
Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Max.Blog